Commit Graph

5729 Commits

Author SHA1 Message Date
justdave%bugzilla.org
a9ae7dc999 [SECURITY] Bug 252638: It is possible to send a carefully crafted HTTP POST message to process_bug.cgi which will remove keywords from a bug even if you don't have permissions to edit all bug fields (the "editbugs" permission). Such changes are reported in "bug changed" email notifications, so they are easily detected and reversed if someone abuses it.
Patch by Myk Melez <myk@mozilla.org>
r=gerv, a=justdave
2004-10-25 07:19:05 +00:00
justdave%bugzilla.org
5a97cc9bea Bug 250897: Enforce a 10 minute waiting period between password reset attempts to prevent the user getting mailbombed if the form is submitted multiple times.
Patch by Joel Peshkin <bugreport@peshkin.net>
r=kiko, a=justdave
2004-10-25 07:12:22 +00:00
justdave%bugzilla.org
c76cd588ce Bug 254498: Check for comment required for time validation was too late.
Patch by Tiago R. Mello <tiago@async.com.br>
r=kiko, a=justdave
2004-10-25 04:49:32 +00:00
justdave%bugzilla.org
f9cc55e94e Backing out patch for bug 251596: found a problem with it after I committed. See the bug. 2004-10-25 04:35:30 +00:00
justdave%bugzilla.org
5b1d0d890e Bug 251596: show.html.tmpl wasn't using the customized body attribute
Patch by Marc Schumann <wurblzap@gmail.com>
r=kiko, a=myk
2004-10-25 04:28:32 +00:00
jocuri%softhome.net
ed4eadf795 Documentation patch for bug 143490: Update documentation regarding code changes needed when running Bugzilla under win32 (some are no longer required since checksetup.pl no longer calls unsupported functions when running on Windows); patch by GavinS <bugzilla@chimpychompy.org>, r=vladd. 2004-10-24 23:54:37 +00:00
jocuri%softhome.net
bb1559d660 Patch for bug 192218: Ability to use a hyphen as a way to filter specifically for requests with no requestee; patch by Fr�d�ric Buclin <LpSolit@netscape.net>; r=myk, a=myk. 2004-10-24 23:34:20 +00:00
jocuri%softhome.net
820c52f4eb Patch for bug 252137: tabular reports shouldn't be broken if a row/col/tbl header begins with an underscore; patch by Rob Siklos <rsiklos@adexa.com>; r=gerv, a=justdave. 2004-10-24 23:25:54 +00:00
justdave%bugzilla.org
7dc0b918c5 Bug 265731: multipart_start in the server-push handling code wasn't honoring the $cgi->charset setting.
r=myk, a=justdave
2004-10-23 09:04:16 +00:00
myk%mozilla.org
2f0c4e26bf fix for bug 265499: support custom stylesheets; r=gerv, a=myk 2004-10-21 21:47:34 +00:00
myk%mozilla.org
58df7c52ab fix for bug 263250: adds a base tag to the simple buglist so it can be loaded in an iframe on a remote site and have the CSS still work 2004-10-21 19:13:28 +00:00
myk%mozilla.org
2b4cd0e446 fix for bug 256208: makes checksetup.pl create CVS-ignored skins/custom/ and children; r=gerv, a=justdave 2004-10-21 19:05:22 +00:00
myk%mozilla.org
6a78d0277b Fix for bug 256207: moves CSS files to skins/standard/ as part of CSS plan; r=gerv, a=justdave 2004-10-21 19:02:30 +00:00
myk%mozilla.org
aedb51d8be Fix for bug 265240: make collectstats generate valid RDF by not cutting off the opening RDF tag; r=kiko, a=myk 2004-10-20 23:00:45 +00:00
jocuri%softhome.net
f78e4dcd3f Patch for bug 232155: Remove uninitialized value warning from Pperl's Cookie.pm and unify code by removing redundancy; patch by Christian Reis <kiko@async.com.br> backported to 2.18 by Rob Siklos <rsiklos@adexa.com>; r=vladd,kiko, a=justdave. 2004-10-20 20:58:45 +00:00
myk%mozilla.org
867bde718a Fix for bug 265303: updates RDF content type to new standard application/rdf+xml; r,a=justdave 2004-10-20 20:48:29 +00:00
mcafee%mocha.com
892c6144a3 linestyle apparently changed for gnuplot 4.0, leaving 3.7 syntax in place for now, we should deal with this better. 2004-10-20 06:08:19 +00:00
mcafee%mocha.com
cc03b10853 Adding comments for OSX. Some other minor comments. 2004-10-20 04:56:17 +00:00
mcafee%mocha.com
02767cc32e Fixing machines array typo. showpoint arg doesn't apply in machine or test selection mode. centered the graph, added a title in bold. r=cclabaugh 2004-10-19 23:06:27 +00:00
jocuri%softhome.net
085434b456 Patch for bug 264003: Include the DBI error in the error message if 'createdb' fails; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=kiko, a=justdave. 2004-10-19 20:33:27 +00:00
jocuri%softhome.net
09b53317a1 Patch for bug 189073: Allow accept as a resolution when changing multiple bugs only if all bugs are opened; r=kiko, a=justdave. 2004-10-19 20:11:34 +00:00
jocuri%softhome.net
17768c0ffb Patch for bug 199811: Implement UI for 'contains none of the strings' search operator; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave. 2004-10-19 20:02:43 +00:00
psychoticwolf%carolina.rr.com
854e1a528f Bug 264906. Various Application Manager Issues (and inc_footer typo). Patch by Chris Thomas. r=Wolf. 2004-10-19 07:40:56 +00:00
jocuri%softhome.net
6976bb0f22 Patch for bug 261434: implement functionality to delete a user semi-properly (only works for users with no bugs/comments); patch by Ivan Todoroski <grnch@gmx.net>; r=justdave, a=justdave. 2004-10-17 11:07:39 +00:00
psychoticwolf%carolina.rr.com
18f9d95022 Fix Bug 264439. Unable to display themes/extensions for all platforms. 2004-10-17 06:47:47 +00:00
cls%seawood.org
dc79d1979e Clean up error messages.
Bug #260171 r=timeless
2004-10-17 06:19:40 +00:00
psychoticwolf%carolina.rr.com
3a3a1604a9 Fix DownloadCount Error reported in Bug 257229 Comment 9. DownloadCounts should be last 7 days, not one day 7 days ago. 2004-10-17 05:23:15 +00:00
psychoticwolf%carolina.rr.com
a1261bb589 Fix Bug 255296, User Manager Column Headings. Bug 255306, Show when last logged in. Bug 255308, Password Reset Notifications. Bug 255322, Ability to Create Accoutns Bug 255912, Author Disable should Hide their items. 2004-10-17 04:40:53 +00:00
cls%seawood.org
1953bdd78f Fix the regexp & notregexp query cases when given the branch name HEAD.
Bug #237525 r=timeless
2004-10-11 20:28:48 +00:00
cls%seawood.org
83deb45748 Explicitly set foreground color to black
Bug #241466 r=timeless
2004-10-11 20:18:03 +00:00
myk%mozilla.org
94b6ee4d16 implementation for bug 262967: RSS feeds for revision logs; r=cls 2004-10-10 04:54:56 +00:00
jocuri%softhome.net
5e1c4aeb42 Patch for bug 251338: Installation section should mention that you need an MTA installed; patch by Colin S. Ogilvie <colin.ogilvie@gmail.com>; r=vladd, a=justdave. 2004-10-09 20:49:42 +00:00
jocuri%softhome.net
f837994ebd Patch for bug 257765: Make replies to private comments private by default; patch by Marc Schumann <wurblzap@gmail.com>, r=kiko, a=justdave. 2004-10-09 20:39:51 +00:00
jocuri%softhome.net
36bdeed877 Patch for bug 263165: Make Bugzilla specify table type as MyISAM when creating tables; patch by Byron Jones (glob) <bugzilla@glob.com.au>, r=kiko, a=justdave. 2004-10-09 20:21:39 +00:00
kiko%async.com.br
4f52134c24 Fix for bug 128747: Bonsai should be made architecture independent.
Convert trapdoor to being a perl file that uses builtin crypt(), and
fix pretty much everything that treated it specially. We now no longer
depend on gcc or anything else. Also fixes by consequence bug 263242,
How about if trapdoor didn't SEGV with no arguments?  which caused me
much embarassment this week. r=cls.
2004-10-08 01:06:46 +00:00
psychoticwolf%carolina.rr.com
579b744d34 Clean up header/footer. Fix index bug. 2004-10-07 19:24:51 +00:00
psychoticwolf%carolina.rr.com
0c90a441ab Developer CP bustage fix. 2004-10-07 07:16:07 +00:00
jocuri%softhome.net
9e25419df2 Patch for bug 256567: Harmonize descriptions of classifications and products in terms of 'FILTER html'; patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, kiko, a=justdave. 2004-10-07 07:12:40 +00:00
psychoticwolf%carolina.rr.com
393367d4e7 Fix Extensions section bustage. 2004-10-07 07:04:59 +00:00
psychoticwolf%carolina.rr.com
63dc0d0aca Update-beta themes section. Bug 260157. 2004-10-07 06:36:17 +00:00
psychoticwolf%carolina.rr.com
ce3c02e37f Update-beta themes section. Bug 260157. 2004-10-07 06:32:05 +00:00
psychoticwolf%carolina.rr.com
13c6e5df2e Temporarily Disable direct author e-mailing 2004-10-07 03:29:24 +00:00
psychoticwolf%carolina.rr.com
8f9282241b Temporarily Disable direct author e-mailing 2004-10-07 03:07:16 +00:00
psychoticwolf%carolina.rr.com
2ed94ac90a Add missing file. 2004-10-06 19:50:22 +00:00
psychoticwolf%carolina.rr.com
8851629428 Removing files unused by update-beta. Bug 260157. 2004-10-06 19:32:01 +00:00
psychoticwolf%carolina.rr.com
fa5f21a65d Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 18:35:28 +00:00
psychoticwolf%carolina.rr.com
5dfdf928d8 Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:50 +00:00
psychoticwolf%carolina.rr.com
dc61a553b3 Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:49 +00:00
psychoticwolf%carolina.rr.com
715d4d0937 Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:48 +00:00
psychoticwolf%carolina.rr.com
0b8fba3463 Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:47 +00:00
psychoticwolf%carolina.rr.com
2c9eb9bd4f Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:46 +00:00
psychoticwolf%carolina.rr.com
6024f9d5f6 Initial Landing of update-beta code. Bug 260157. Initial Landing of Developer CP. Bug 254925. 2004-10-06 07:10:45 +00:00
jocuri%softhome.net
acc5cefead Patch for bug 262126: fix invalid date parsing; patch by me, r=kiko, a=justdave. 2004-09-30 22:47:17 +00:00
jocuri%softhome.net
789ba29f99 Patch for bug 261210: adapt bz_secure CSS for text based browsers; patch by Jason Pyeron <jpyeron@pyerotechnics.com>; r=myk, a=myk. 2004-09-30 22:43:57 +00:00
jocuri%softhome.net
21ca15c693 Patch for bug 258712: whine.pl should honour emailsuffix; patch by Marc Schumann <wurblzap@gmail.com>; r=erik, a=justdave. 2004-09-30 21:40:49 +00:00
jocuri%softhome.net
f34bbf06b7 Patch for bug 237769: use Administrator instead of root for super-user name in Windows, and change the ppm repository from Apache to the one maintained on landfill; patch by Byron Jones (glob) <bugzilla@glob.com.au>; r=vladd, a=myk. 2004-09-29 23:39:37 +00:00
jocuri%softhome.net
fbbad095b2 Patch for bug 261993: fix uninitialized value error in webserver log when accessing buglist.cgi (generated by the fix for bug 255512); patch by Marc Schumann <wurblzap@gmail.com>; r=justdave, a=myk. 2004-09-29 22:37:17 +00:00
myk%mozilla.org
241d4ec401 Fix for bug 103794: adds 'home' link to navigation bar; patch by GavinS; r,a=myk 2004-09-27 22:55:29 +00:00
psychoticwolf%carolina.rr.com
35225eb534 fix case-sensitivity issues with moreinfo.php and showlist.php with the images on linux. No Bug 2004-09-26 22:26:53 +00:00
psychoticwolf%carolina.rr.com
ccec061d22 Frontpages current release filtering changes. Bug 261691 2004-09-26 19:42:17 +00:00
psychoticwolf%carolina.rr.com
564b28c4f0 Fix for Bug 260535, Typo on thunderbird extension page 2004-09-26 17:30:17 +00:00
psychoticwolf%carolina.rr.com
1d2e056b9a Fix for Bug 261519 - MySQL error on RSS feeds 2004-09-25 19:09:04 +00:00
erik%dasbistro.com
1409f7ca10 Fix for bug 258029: sets whining group inheritance in the correct order. r,a=justdave 2004-09-25 00:06:44 +00:00
kiko%async.com.br
a3b879505c Fix for bug 261446: checksetup.pl needs to update permissions on
images/. r,a=myk
2004-09-24 20:49:51 +00:00
kiko%async.com.br
d1ab62e597 Landing fix for bug 153811: default severity should be parametrized.
r,a=myk.
2004-09-24 20:41:30 +00:00
myk%mozilla.org
d9b1862909 Fix for bug 252739: moves inclusion/exclusion action names to button name instead of button value so that button values (which are also used as labels) will be localizable; patch by Marc Schumann; r=kiko,myk; a=justdave 2004-09-24 01:01:30 +00:00
myk%mozilla.org
03bbc8db42 Fix for bug 261273: make column changing work with Sun ONE web server; fix by tmabbott@hbs.edu; r,a=justdave 2004-09-24 00:53:26 +00:00
timeless%mozdev.org
d08552d8a1 Bug 261071 Error: Error in parsing value for property 'vertical-align'. Declaration dropped.
r=vladd a=myk
2004-09-23 21:17:12 +00:00
jocuri%softhome.net
366121aeb3 Patch for bug 258938: Minor tweak to editmilestones templatization; patch by GavinS <bugzilla@chimpychompy.org>; r=jouni, a=justdave. 2004-09-23 19:14:13 +00:00
jocuri%softhome.net
604a856e97 Patch for bug 255512: For bz_secure, distinguish between mandatory and non-mandatory groups and create distinct CSS classes to enable customizations by the admin; patch by Marc Schumann <wurblzap@gmail.com>; r=kiko, r=joel, a=justdave. 2004-09-23 19:05:20 +00:00
kiko%async.com.br
376fa8e696 Landing fix for bug 260411: MS IE breaks png alpha channel padlock. Adds
a new PNG file with a 1-bit alpha layer. File by Jason Pyeron
<jpyeron@pyerotechnics.com> r=kiko, a=myk.
2004-09-23 18:08:31 +00:00
cls%seawood.org
0875026632 Do a case-insensitive sort before printing checkins.
Bug #242360 r=timeless
2004-09-23 04:43:46 +00:00
cls%seawood.org
38f6d691cc Make the 'Mail everyone on this page' message grammatically correct for the 1 user case
Bug #165946 r=timeless
2004-09-22 23:06:57 +00:00
cls%seawood.org
2612c3dddc Require specific checkin id format to avoid exploit.
Bug #260601 r=timeless
2004-09-22 18:44:38 +00:00
cls%seawood.org
0bdfb4d0a7 Fix typo. Bug #39284 2004-09-22 06:34:34 +00:00
cls%seawood.org
3d64033baa Move shell_escape from CGI.pl to globals.pl
Remove CGI.pl dependency from multidiff.cgi
Bug #44642
2004-09-22 03:59:19 +00:00
cls%seawood.org
5b7d605d0e Make multidiff work with files that have been cvs removed.
Bug #180528 r=timeless
2004-09-22 02:22:29 +00:00
timeless%mozdev.org
e5cc8af8a8 Bug 259452 Add bonsai style &mark support to showbug for bug comments
r=kiko a=justdave
2004-09-21 19:56:19 +00:00
myk%mozilla.org
256bfa463c Fix for bug 245075: command-line script that sends bug mail so installations can push bug mail out if it's been missed by the code that sends mail when changes are made; written by Dave Miller 2004-09-21 00:58:32 +00:00
gerv%gerv.net
bb8661aa05 Bug 250979 - fix broken anchors to severity. Patch by Tobias Sager <moixa@gmx.ch>, r=gerv, a=justdave. 2004-09-18 11:33:10 +00:00
cls%seawood.org
f0886ed803 Remove 'use diagnostics' calls to speed up scripts.
Bug #204463 r=justdave
2004-09-18 05:02:17 +00:00
cls%seawood.org
705ab80985 Removing leftover debug statement. 2004-09-16 16:02:44 +00:00
cls%seawood.org
7c6b8ae693 Allow bonsai (dolog.pl) to properly handle filenames with spaces.
Thanks to zeuice@yahoo.com for the original patch.
Bug #44642
2004-09-16 05:47:19 +00:00
cls%seawood.org
6653ecac41 Fix security issue related to unsanitized rcs version strings:
* Added sanitize_revision()
* Do not install SourceChecker.*
* Add ~ & ` to shell_escape()
Bug #39284 r=timeless
2004-09-15 22:44:55 +00:00
cls%seawood.org
f2f73e6054 Misc cleanup to better handle files with spaces & special chars:
* Do not encode / in url_quote
* Do not install old/unused perl scripts
* Update README
* Replace system(rm/mkdir) calls with standard perl modules
* Use url_quote to quote filenames when passing files between cgis
* Use shell_escape on filenames that are passed to system calls via open()

Bug #44642 r=timeless
2004-09-15 15:48:18 +00:00
justdave%bugzilla.org
37931ee9fb Bug 256004: Fix regression that caused duplicate sortkeys in the fielddefs table
r=myk, a=justdave
2004-09-15 00:58:32 +00:00
myk%mozilla.org
bf6545f387 Fix for bug 249868: makes series pages validate 2004-09-14 23:30:20 +00:00
myk%mozilla.org
2a740cfae6 Fix for bug 240460: updates upgrading examples with new URLs and version numbers; r=gerv; a=justdave 2004-09-14 23:04:38 +00:00
cls%seawood.org
9fa96cc1ff Only escape $rcsfile when invoking shell otherwise standard perl functions fail.
Bug #258668
2004-09-14 09:10:07 +00:00
justdave%bugzilla.org
104a25fa65 Oops, backing out changes to administration.xml that are supposed to be part of a different patch. 2004-09-14 05:50:29 +00:00
justdave%bugzilla.org
3da173d889 Bug 257534: Require Perl 5.8.1 or later when running on Windows with ActiveState Perl (there is no official CGI ppm build with a new enough version for Bugzilla on any earlier version of ActiveState Perl)
Patch by Byron Jones <bugzilla@glob.com.au>
r=justdave, a=justdave
2004-09-14 05:48:54 +00:00
vladimir%pobox.com
af7f38b9ad Moving VersionCheck.php from toolkit 2004-09-14 04:12:32 +00:00
timeless%mozdev.org
d614c175c5 oops, patch applied poorly, moving print and close lines back into
mail_notification where they belong (caught by cls)
2004-09-14 01:37:11 +00:00
timeless%mozdev.org
d15aa74251 Bug 244801 fix so email not required on checkin
patch by mikey@mikey.com r=cls
comment block changes by cls r=timeless
2004-09-14 01:05:32 +00:00
timeless%mozdev.org
602b1b4def removing tabs / trailing whitespace. enforcing whitespace style
r=cls
2004-09-14 00:47:25 +00:00
cls%seawood.org
ca74a48c90 Escape special chars in filenames when calling rlog.
Fix minor 'used once' warnings.
Bug #258668 r=timeless
2004-09-13 21:41:22 +00:00
cls%seawood.org
edec492a36 Strip ./ from the beginning of dirnames since that ./ causes bonsai to see ./CVSROOT & /CVSROOT as different directories.
Bug #253644 r=timeless
2004-09-13 21:00:58 +00:00
justdave%bugzilla.org
a3b068601f Bug 252295: Ensure that the "Edit Search" link goes back to the same form the search was created on when running a saved search that was saved before we had multiple search forms.
r=gerv, a=justdave
2004-09-12 22:19:37 +00:00
justdave%bugzilla.org
fbf187730e Bug 253696: work around NAME_lc bug in ActiveState Perl on Win32
Patch by Byron Jones <bugzilla@glob.com.au>
r=jouni,bbaetz a=justdave
2004-09-12 20:20:42 +00:00
ian%hixie.ch
0d46e744e8 Provide a hook for scripts that want to do something after every command 2004-09-12 19:44:58 +00:00